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O | We extend the group law of curves of degree three by chords and tangents to the Jacobi variety 
^ ' of plane curves of degree n > 4 by replacing points by point groups and lines by algebraic 
curves. The curves are nonsingular or have simple singularities. In the cases n = 4, 5, 6 we 



\ have a close analogy to the case n = 3. We describe an algorithm using Groebner bases. 

< 

ji . 1 Introduction 

-i— > ■ 

The Jacobi variety of an algebraic curve of genus g plays a central role in algebraic 
geometry. Explicit descriptions of the group law play a less important role in the history 
of the subject. With the development of cryptography algorithms arose for the group law. 
In 1987 D.G. Cantor described the group law of a hyperelliptic curve in the context of 
^ ; cryptography in analogy to the GauB composition of quadratic forms, cf. |4"1 Hlj. 

Later group laws of other classes of plane curves were described. The papers [HI CHI H2j 
are based on the analogy of the Jacobian group with class groups in number theory. Their 
l/"") . methods are restricted to curves with a special type of infinite points. Other papers are 
concerned with special types of curves (e.g. Picard curves [7J [H], C a fe-curves [I]). The 
^ | papers f7[ EI] describe general ideas for an algorithm for arbitrary plane curves. They 
£3 ' are based on the theory of plane curves. These algorithms are not practical from a 

computational point of view. 
k*" ■ The content of this paper is an algorithm for smooth plane curves or of plane curves 
^ , with simple double points. We give an elementary presentation using projective curves, 
Riemann surfaces and commutative algebra. We consider arbitrary complex nonsingular 
' plane n-curves C (n > 4) with an arbitrary zero point. We describe a geometric group 
law intersecting C with certain algebraic m-curves. For n = 4, 5, 6 we intersect C with 
(n — l)-curves and we have a very close analogy to the group law of an elliptic curve. 
On the basis of the geometric group law we give an algebraic description. We represent 
divisors by certain homogeneous ideals and describe the group law by ideal operations. 
All operations are rational and can be carried out by Groebner basis operations. Infinite 
points do not play a special role. The construction works also for curves with simple 
double points. We give an example for a curve of genus 2. In the last sections we discuss 
hyperelliptic curves, Picard curves and the case of fields of characteristic p. 

Because of the use of Groebner bases it is difficult to give a realistic complexity analysis. 
We used the computer algebra program Mathematica 4.0 forming the computations. 
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2 Nonsingular curves and intersections 



Consider a nonsingular projective plane curve C of degree n > 4 defined by the irreducible 
polynomial 

F{x,y,z):= £ a : , ./•>'.;" 1 

i+j<n 

One can consider C as a Riemann surface of genus g = ( n ~ 1 K n ~ 2 ) ([ e g = 3,6, 10, • • •). 
In every point one of the coordinates x,y,z defines a complex chart. We have a g- 
dimensional space of holomorhic differentials. Every holomorphic differential admits an 
explicit representation in the form 

7i 72 73 
x y z 
dx dy dz 



G{x,y,z) 



1\F X + j 2 F y + 7 3 F 2 

where G(x,y,z) is a homogeneous polynomial of degree n — 3 and 71,72,73 are three 
complex numbers chosen depending on x, y, z such that the denominator is not zero (cf. 

Furthermore let H(Pi+ ■ ■ ■ + Pt) be the subspace of holomorphic differentials whose 
zero divisors contain the points P\, ■ ■ ■ ,P t . 

Now we consider m-curves C m . It is allowed that C m has multiple irreducible com- 
ponents. First we consider the case 1 < m < n — 1. C m has ( m+1 K m+2 ) parameters. 
Given b m := m (™ +3 *> points on C we have a (not necessary unique) C m -curve through 
these points. (A multiple intersection point will correspond to a multiple contact of C m 
with C). Because of the irreducibility of C cLIl 771- CUXV6 Cjn -h-cLS mn intersections with C. 
Therefore we have 

m(m + 3) m(2n — m — 3) / n-m-1 \ 

c m := mn = = q — 

2 2 \ 2 y 

further intersections. 

For n = 4,5,6 we will be interested in the cases m = n — l,n — 2 and n — 3. Here we 
have c n _i = #,c n _ 2 = Cn- 3 = 0-1 and = # + 2n-2, fo n _ 2 = g + n-2,b n _ 3 = g-1. 

For n > 6 we will need also curves C m of degree m > n. In this case we have the 
difficulty that it is possible, that C is an irreducible component of C m . For m > n we fix 
a monomial x k y l z n ~ k ~ l of F with 7^ 0. Then we consider the m-curves 

^ y Pi,j,m—i—j X y^ Z . 

with 



They form a linear system of dimension f 2 / _ \ 2 / _ ^ = ~ ^ °^ 
curves without common components with C. Given b m := mn — g points on C we find 
a C m -curve of this special form through these points. The curves C and C m have no 
common components and therefore they have mn intersections, i.e. we have c m = g 
further intersections. 

3 Jacobi varieties and Reduced Divisors 

The Jacobi variety of C is the Abelian group 

Jac{C) = Dtv°{C)/Dtv p (C). 
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Here Div°(C) denotes the group of divisors of degree and Div p (C) is the subgroup of 
principal divisors (i.e. the zeros and poles of analytic functions), cf. [TT]. If G(x,y,z) 
defines an m-curve C m , then G(x,y, 1) defines a meromorphic function with zeros at the 
finite intersections of C m and with poles of order m — haX the infinite points P of C if P 
is a /i-fold intersection with C m . Let be the divisor of the infinite points of C. Then 
we have P\+ ■ ■ ■ + P mn ~ mD^, if Pi, • • • , P mn are the (possibly infinite) intersections 
of C m and C. 

Wie fix an arbitrary point Pq on C. We call a divisor D of the form D = P\ + • ■ ■ + 
Pt — tP with Pi, ■ • • ,P t ^P a semireduced divisor. We call this semireduced divisor D 
a reduced divisor if there is no divisor D' = P\ + ■ • • + P' a — sP with P'i , • ■ ■ , P' s ^ Po, 
D' ~ D and s < t. 

Proposition 1 We find in every divisor class of Jac(C) a unique reduced divisor with 
t<g. 

Proof: Existence: Let D G Div°(C). By the Riemann Roch theorem we have 
dimL(P> + gP ) > g - g + 1 = 1. It follows 

D + gP + (f)=P 1 + --- + P g 

with (/) G L(D + gPo) and certain Pj G C. Therefore we have D ~ Pi + - • ■ + P g — gPo, i.e 
the set of semireduced divisors with t < g is not empty and we can find reduced divisors. 
Uniqueness: Let P = Pi + • • • + P t — tP ~ D' = Q 1 + ■ ■ ■ + Q t — tP be two different 
reduced divisors with Pj, Qi ^ P . There is a function / with (/) = D — D' . Then the 
divisor D'+ (f — /(Po)) has the form R\ + - ■ ■ R s — sRq with s < t. This is a contradiction. 
• 

Remark: One can choose P arbitrarily, but the structure of a reduced divisor might 
vary with this choice. For the reason of simplicity it can be useful to choose for P an 
exceptional point (flex, rational point, infinite point etc.). 

Remark: We mention that not all semireduced divisors with t < g are reduced. In the 
generic case we have t — g for a reduced divisor. 

We have the following abstract characterisation of reduced divisors. 

Proposition 2 The following three assertions are equivalent. 

(i) The divisor D = P\ + • • • + Pt — tPo with t < g and Pi, • • • , Pt ^ Po is reduced. 

(ii) dim H(P 1 + ■■■ +P t )=g-t. 

(Hi) The dimension of the linear system of (n — 3) -curves, which vanish on Pi, ■ ■ ■ ,P t 
does not exceed g — t. 

Proof. The proposition is a consequence of the Riemann Roch theorem. • 
For n = 4, 5, 6 we have an explicit description of the set of reduced divisors. 

Proposition 3 (i) Letn = 4. The divisor D = P 1 + ■ ■ ■ +P t — tP with t < g = 3 and 
Pi, ■ ■ • , Pt 7^ Po is reduced if and only ift = 3 and Pi, P2, P3 lie not on a projective line 
or t < 3. 

(ii) Let n = 5. The divisor D = Pi + ■ ■ • + P t — tP with t < g = 6 and Pi, ■ ■ • ,P t ^P 
is reduced if and only if no 6 points lie on a conic section and no 4 points lie on a line. 
(Hi) Letn = 6. The divisor D = P 1 + ■ ■ ■ +P t — tP witht < g — 10 and Pi, ■ ■ ■ , P t 7^ P 
is reduced if and only if no 10 points lie on a cubic and no 9 points form the intersection 
of two cubics and no 8 points lie on a conic section and no 5 points lie on a line. 
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Proof, n < 2d + 2 points of the projective plane fail to impose independent conditions 
on curves of degree d if and only if either d + 2 of the points are collinear or n = 2d + 2 
and the n points lie on a conic, cf. |0]. The proposition follows from this fact, from the 
Cayley-Bacharach theorem, cf. also jB] and from Proposition 2.» 

Remark: An explicit characterisation of reduced divisors for arbitrary n is associated 
to the classification problem of special divisors on Riemann surfaces or to the Cayley- 
Bacharach conjectures for algebraic curves. However there is an algorithm to determine 
the reduced divisor (cf. below). 



4 The construction of the reduced divisor 

Let 

D = D + - D~ = P x + •■■ P.-Qx- ■■■ -Q s 

with Pi, Qi e C be an arbitrary divisor of degree zero. 

At first we consider an m-curve with a polynomial G(x, y,z) ^ mod F with a 
minimal m > n — 2 such that 

( m(m+3) m < n 

s + g <o m := < 2 

[ mn — g tor m > n 

through the s points of D + and (b m — s)Pq- Because of our discussion at the end of section 
2 the polynomial G(x, y, z) ^ mod F exists and there are g remaining intersections 
Rx, ■ • ■ , R g . We have 

D + + (b m - s)P + Rx+ ■■■ +R g ~ mD^. 

Then we consider another m-curve G'(x,y,z) ^ mod F through the s + g points of 
D~ + Ri + • • • + R g and (b m — s — g)Po- Because this curve is not necessary unique 
we require a maximal additional contact a at Pq. Let Si, ■■■ ,S g - a be the remaining 
intersections not equal to Pq. We have 



'oo • 



D +Rx+ ■■■ +R g + (b m -s-g + a)P + Si + ■■■ + S g . a ~ mD c 
It follows 

D + - D~ ~ Sx + ■■■ +Sg_ a -(g- ^PC- 
Proposition 4 

D := Si+ ■■■ + S g _ a - (g - a)P 
is the reduced divisor for D. 

Proof. From the above relations it follows D ~ D. Furthermore we consider the divisor 

Dx := D~ + Pi + • • ■ + R g + (b m - s - g + a)P - (m - n + 3)Poo. 
Lemma 5 All differentials of H(Dx) have the form 



G m (x,y,z) 



7i 72 73 
x y z 
dx dy dz 



z m - n+3 (7iPx + l2F y + 7 3 P 2 

with deg G m = m. 



4 



Proof. Case 1 (the positive part of D 1 does not contain infinite points): Meromorphic 
differentials are unique determined by its principal part up to a holomorphic differential. 
The space of principal parts is (m— n+3)n-dimensional. Therefore the space of differentials 
with poles at most at (m — n + 3)-Doo has the dimension (m — n + 3)n + g = mn — g + 1. 
Otherwise the space of degree m polynomials G mod F has the dimension — g + 1 for 
m> n — 3 (cf. above). Therefore every differential with poles at most at (m — n + 3)-Doo 
has the above form. 

Case 2 (a points of the positive part Di and the negative part Df of Di cancel): 
Analogously the space of differentials with negative part at most at Df has the dimension 
mn — g + 1 — a. On the other side the space of degree m polynomials Gmod F with zeros 
at the a common points of Df and D{ has also the dimension mn — g + 1 — a.» 

For G m = G' we obtain a differential in H(Di). Because C has maximal contact at 
Pq with C we have no further differential in H(D\). Therefore we have 

dim H(D 1 ) = 1. 

Because D\ + Si + ■ ■ ■ + S g - a is the divisor of poles and zeros of the differential with 
G m = G' it is a canonical divisor. By the Riemann Roch theorem it follows 

dim H{Si + • • • + Sg- a ) = dim L(£>i) = 

(s + g + b m — s — g + a — (m — n + 3)n) — g + 1 + 1 = 
mn — (m — n + 3)n — 2g + a + 2 = a. 
Therefore D is reduced according to Proposition 2. • 

5 The group law 

We represent the elements of the Jacobian by reduced divisors. For a description of the 
group law it is sufficient to reduce — D and D\ + D 2 if D, Di, D 2 are reduced divisors, 
f . The inverse divisor. Let D = P\ + • • • + P g — gP where P±, ■ ■ ■ ,P g = Pois allowed. 
In this case we apply the above construction to D + = gP and D~ — P 1 + ■ ■ ■ + P g . 
2. The addition of reduced divisors. Let Di = P± + • ■ ■ P g — gP$ and D 2 = P g +i + • • • + 
Pig — gPo- 111 this case we apply the above construction to D + — P 1 + ■ ■ ■ + P 2g and 
D~ = 2gP . 

For n = 4, 5,6 we can carry out the construction with (n — I)-curves. Therefore we 
have a close analogy to the group law of cubic curves. In these cases we have fo n _i = 
g + 2n — 2 > 2g. Instead of the (n — 2)-curves of the cubic case we consider (n — f )-curves. 
We construct an {n — I)-curve through Pi, ■ ■ ■ , P 2g , (2n — 2 — g)Po. We have the remaining 
points Ri, • • • , R g . Then we construct an (n— I)-curve through R 1 , ■ ■ ■ ,R g with highest 
contact at P and obtain the remaining points Si, • • • ,S t . Then Si + ■ ■ ■ + S t — tP is 
the reduced divisor for Di + D 2 . Analogously, for n > 7 we carry out the construction 
with m-curves G(x, y, z) ^ mod F with m > n and b m > 2g (i.e. mn > 3g). 

6 Algebraic description - The ideal-divisor-correspondence 

1. The affine case. We remark that there is a one-to-one correspondence between ideals 
of the quotient ring C[x, y]/Ic of polynomial functions on the affine curve C and the 



ideals of C[x, y) with I D I c where Ic = (F(x,y, 1)). C[x,y]/Ic is one-dimensional and 
a Dedekind ring, cf. j2]. 

Now let I be an ideal with / D Ic- Then / is zero dimensional. Because C[x,y]/Ic is 
a Dedekind ring we have the unique primary decomposition 

where p = (a^y*) and 1^ = ((x — Xj), (y — yi),Ic), cf. 0. We associate to / the effective 
divisor 

Dj : = ^m^P . 

Conversely, let D := J2 m iPi be an effective divisor of finite points. Then we associate to 
D the ideal 

I D :=f)(I%,I c ). 

Therefore we have a one-to-one correspondence of effective divisors and ideals with / D Ic- 
Furthermore we have the following Lemma. 

Lemma 6 Let D,D f be effective divisors of finite points and let f G Id- Then we have 
(/) > D and 

(I d Id>, Ic) = Id+d> and ((/), I c ) : I D = I(J)-d ■ 

Here (f) denotes both, the ideal generated by f(x,y) and the divisor of the analytic con- 
tinuation of the meromorphic function f(x,y). 

Proof. The proof follows from the above primary decomposition and the relations 
I p p f]I q Q = P P I q Q mod I c for P ^ Q and I p P f]I q P = Jp ax M mod I c . • 
2. The projective case. We suppose that [0 : 1 : 0] ^ C. Now let D = D e + be an 
effective divisor with the finite part D e and the infinite part D^. We define 

I h D := H z (I De ) n H X (I D J 

where Ir> e C C[x, y], Id^ C C[y, 2;] and H z , H x are the homogenisations with respect to 
z, x, respectively. 

Conversely, let I be a homogeneous ideal ofC[x,y,z] containing the curve ideal, i.e. 
I D (P(x, y, z)). Then we define 

Di := D Az( i) + D (A x (i), z) 

where A X ,A Z are the affmisations with respect to z,x. 

We have Di D = D. We remark that for ideals Ii,l2 with Ii,l2 D (F(x,y, z)) the 
relations l(Di) = I and IdiIu 2 = l£'i+£ , 2 are in general not valid. 

Now we define a product © for homogeneous ideals Ii,l2 which corresponds to the 
addition of divisors. We form the ideal product of the corresponding afline ideals. In 
order to include infinite points we consider products with respect to two affmisations with 
z,x = 1. The intersection of the corresponding homogenisations will contain all curves 
with intersection divisor > + Dj 2 . I.e. we define 

I a © I 2 := # z ((4,(Ii) • A z {l 2 )J c )) f| H,((MW ■ Mh), Ic)) 

where I x := A X (H Z (I)) for ideals I c€[x,y]. 
A generalized ideal quotient is defined by 

(G) I := H Z ((A Z ((G)), Ic) : A Z (I)) f) H X ((A X ((G)), P c ) : A x (l)). 



Proposition 7 Let D,D' be effective divisors and let G e Id- Then we have (G) > D 
and 

Id+d' = Id © Id' an d \g)-d = 1(G) Id- 

Proof. The proof follows from the fact, that the left and the right side are equal to the 
homogeneous ideal of all curves with intersection divisor > Di ± + D\ 2 and > (G) — Di, 
respectively. • 

7 Reduction and the group law 

Let D = D + — D~ with deg D + = deg D~ = s be a divisor of degree zero and let I + = 1 D +, 
I = I D _ . Furthermore we consider the homogeneous ideals 

T — T h 

L r .— L rPo 

of forms with an r-fold point Pq. We choose m such that b m > s + g. Then we choose 
an arbitrary element G in I + © I& m _ s = ^■D++(b rn ~s)p °f degree m and we form J = 
(G)0(I + ©I{, m _ s ). Then we determine the number a such that (JOl")nLj m _s +ff+a contains 
exactly one Groebner basis element G' of degree m with respect to a degree order. We 

form I red = (G?')0((J0l - )nl6 ra _ a+fl+a ) = Ired = Vsi+'Sg-a where S g ^ a -(g-a)P 

is the reduced divisor of D. 

Remark Given I + , I - , t one can carry out the determination of I + I& m - S; J — {G) 
(1+ I fera _ s ), (J 1-) n \ r (r > b m - s + g) and (G f ) ((J 1~) n I bm - s +g+a) by Groebner 
basis calculations, cf. 0. 

Now we can describe the group law. In order to add the divisors Di — P\-\- ■ ■ ■ P g —gP 
and D 2 = P g +i + • • - + P% a — gPo we apply the above construction to D + = P 1 + ■ ■ ■ + P 2g 
and D~ = 2gP . In order to determine the ideal for — D of D = Pi + ■ ■ • + P g — gP 
(where Pi, ■ ■ ■ , P g = Po is allowed) we apply the above construction to D + = gP and 

D~ = Pi + ■ ■ ■ + Pg. 



8 An Example 

We consider the 4-curve C with x 4 + y A = 
Pi = (1,-1,1). We reduce the divisor 



2z 4 with g = 3. Let P = (1,1,1) and 



D = QPi - QP . 

We choose m = 3. It is sufficient to consider affine ideals. (C has no infinite intersections 
with all curves occuring during the calculation.) We obtain by Groebner basis calculations 
with respect to a lexicographic order 

J+ = {i + Q y+ i5y 2 + 20y 3 +l5y 4 +6y 5 +y 6 , 102-x+52%+1092?/ 2 +1141?/ 3 +598?/ 4 +126?/ 5 }, 

h = {-1 + 3y - 3y 2 + y 3 , -1 - x + 5y - 3y 2 }, 
(I + h, I C ) = {-1 - 3y + 8y 3 + 6y 4 - Qy 5 - 8y 6 + 3y 8 + y\ 
1289 - 128x + 2492y - 2016y 2 - 7476y 3 - 8(% 4 + 7476y 5 + 3080?/ 6 - 2492y 7 - 1419?/ 8 }. 
With respect to a degree order we find an element of degree 3 in (I + l3, Ic) 

f = 2612 - 3078x + 378x 2 + 281x 3 + A78y - 1912xy + 1 195x 2 y - 1286?/ 2 + 1093a;?/ 2 + 239y 3 . 
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Furthermore 



J := ((f), I c ) ■ (I + h) = {698405268857+635735348837|/-10585774871|/ 2 +108619669441|/ 3 , 

268707776349 + 254869376 165a; + 103445986821y + 108619669441y 2 }, 
-66326x 2 y - 735502?/ 2 + 70382a;?/ 2 + 325163?/ 3 , 
J 6 = {i-Qy + i5 y 2-20y 3 +15y A -6y 5 +y 6 , -102+a;+524?/-1092?/ 2 +1141i/ 3 -598?/ 4 +126y 5 }, 



(JI e ,I c ) = {698405268857-3554696264305t/+6651081164962j, 2 -4259940825918m 3 -3049132583596J/ 4 + 7186609158448y 5 -5447186836050y 6 

+ 2328545039678J/ 7 - 662303791517j/ 8 + 108619669441J/ 9 , 
-93764434230515570410626334329726164533810553558278390921760183+2185848162978035880543485328036429801750462217550638009464820i 
+390604925102813740313936712629510601523986718107312688345228286J/-553599197596387095117790236962526646313212938826438985782932370!/ 2 
+ 109584143933719697324470424983767313360642548080131427940056882j/ 3 +488838345917420338620885461620364216394401215438274344792992080;/ 4 
-548212607851251833242108578943280138884947131311429528021917262y 5 +272507862737893198250637137223325900667162331316521096907832914j, 6 
-85848455024362109011538768963037701794199996136791647052272470t/ 7 +17703568847691597391590697413566189778227344673148355783307303t/ 8 }. 



There is an element of degree 3 in (J/6, Ic) 

g = 683086 - 414993a; - 636078a; 2 + 356233a; 3 - 259643y + 6776783;?/. 
Finally we obtain 

Ired = ((g), Ic) ■ (Jh) = {94544281343+377260313207y+408415639297i/ 2 +134215744153y 3 , 

-53515118937 + 13173978910a; - 225487128300y - 134215744153?/ 2 }. 
Because the minimal element of I re d 

-53515118937+ 13173978910a; - 225487128300y - 134215744153y 2 

with respect to a degree order is of degree 2 > n — 3 the ideal I re d is reduced. The ideal 
I re d corresponds to the reduced divisor 

(-0.82409 - 0.62806i, -1.31975 + 0.06425i, 1) 

+ (-0.82409 + 0.62806i, -1.31975-0.06425i, 1) + (-1.18524, -0.40347, 1) - 3(1, 1, 1) ~ D. 

9 Curves with simple double points 

The above construction applies analogously to curves with simple singularities. Here we 
consider the case of n-curves C with d finite simple double points T> 1: ■ ■ ■ , V d ^ Pq with 
F x — F y — 0, F xx F yy — Fl y 7^ 0. Furthermore we suppose [0, 1, 0] ^ C. To every point X>j 
correspond two points T)f , T>~ on the Riemann surface of C of genus g = (gzlMgzg) _ ^_ 



of degree zero. We consider an m-curve with a polynomial G(x, y, z) ^ mod F with 



Let 



A:=P+ + Pr+ ••• +Vj + V d 
be the double point divisor of C. Now consider the divisor 



D = D + -D- = P 1 + ■■■ + P S -Q 1 - ■■■ -Q s 




for m < n 
for m> n 



through the s points of D + , V 1 , ■ ■ ■ ,V d and (b m — s — d)P . We have 

< n — \){n — 2) 

mn — s — 2d — (b m — s — d) = mn — b m — d = d = g 

2 

remaining intersections R±, ■ ■ ■ , R g , i.e. 

D + + A + (b m - s - d)P + i?i + • • • + R g ~ mDoo. 

Then we consider an m-curve G'(x,y,z) ^ mod F through the s points of D~ and 
through R 1 , ■ ■ ■ , R g , T>i, • • • , V d , (b m — s — d — g)Po- We require a maximal additional 
contact a at Po. Let S'i, • • • , S g - a be the remaining intersections not equal to P> We 
have 

D~ + A + R 1 + • • • + R g + (b m - s - d - g + a)P + Si + ■ • • + S 9 _ a ~ mD^. 
It follows 

£)+ _ D~ ~ P := 51 + • • • +Sj- a -(j- a)P . 

Analogously to Proposition 4 one shows that D is the reduced divisor of D. 

For an algebraic description of the reduction let Ia be the ideal of all adjoint curves 
through the T> 1 , ■ ■ ■ ,V d . For a finite simple double point T>i we have two taylor series 
expansions 

y - Hi = af(x - Xi) + af(x- Xi) 2 H 

for the two branches of T>f (or x — xi = bf(y — yf) + bf(y — yi) 2 + • • ■ , if bf — 0). 
Then 

I mx> ± := ~ x i,y- Vi) m ,y- Vi ~ af(x -Xi) a>m-i( x - Xi) 171 ' 1 )) 

i 

are the ideals of polynomials with an m-fold common point with the branch of T>f. Now 
let 

D = miPi + • • • + m p P p + ^(m+£>+ + mfVr) 

i 

be a divisor with different ordinary points Pi, • • • , P p . We consider the ideal of curves 
with intersection divisor > A + D 

^A+D := (ImiPi H • • • PI Irn p P p ) n f](\mf +l)Vf n \mT +1)Vt) ■ 

i 

Now we define an ideal product 0a for ideals Ii = I A+Dl , I2 = Ia+d 2 which corresponds 
to the addition of the divisors Pi and D 2 . 

h A I 2 := ^((AM ■ A Z {I 2 )J C ) : I^^H^AM ■ A X (I 2 )J£) : A X (I A )) 

where Iq := A X (F). Ii 0a 1 2 contains all curves with intersection divisor > A + P x + D 2 . 
A generalized ideal quotient is given by 

(G) A I := H Z ((A Z ((G)) • I A , I C ) ■ A X (I)) f| H X ((A X ((G)) ■ A X (I A ),I£) : A X (I)) 

PROPOSITION 8 Let D,D' be effective divisors and let G e Ia+d- Then we have (G) > 
A + P and 

Ia+d+d' = Ia+d ©a Ia+d' an d I(b)-D = 1(b) ©a Ia+d- 



Proof. The proof follows from the fact, that the left and the right side are equal to the 
homogeneous ideal of all curves with intersection divisor > A + D^ +D i2 and > (G)—Dj, 
respectively. • 

Now let D = D + — D~ with D + ,D~ > 0, degD + = deg-D" = s be a divisor of 
degree zero. Furthermore let I + := I a +d+' I~ := Ia+d-> := ^rP - We choose m 
such that b m > s + d + g. Then we choose an arbitrary element G in I + lb m - s -d = 

I A+D+ + (6 m - s -d)P ° f de S ree m alld We form J = ( G ) 0A ( I+ l bm-s-d) = Ia+K 1+ ... +R a - 

We determine the number r>b m — s — d — g such that (J a I - ) H I r contains exactly 
one Groebner basis element G" of degree m with respect to a degree order. We form 
Ired = (G")0A((J©Al")nl r ). We obtain I red = I A+Pl+ ... +Pt with t = g-r+(b m -s-d-g) 
where Pi + ■ ■ ■ + P t — tP is the reduced divisor for D. 

10 An Example 

We consider the hyperelleptic 4-curve C with x A — y A = 30xyz 2 with g = 2. C has one 
simple double point Vq = (0, 0, 1) with the Taylor series expansions 

x 3 x 11 y 3 y 11 

V ~ 30 ~ 24300000 + " ' ' x ~ ~30 + 24300000 ~ 

We choose P := (1, 1,0) and we consider the points Pi = (4,2, 1), P 2 = (1, —1,0). We 
apply the reduction to ideals I + , I - , which correspond to the divisor 2Vq — Pi — P 2 . 
We have 

and 

I_ = 1 a+p 1+ p 2 = ( xz ~ tyz, -xy - y 2 + Qyz, -x 2 + y 2 + Qyz, y 2 z - 2yz 2 ). 
We form 

i a+2d++2p = I+ ( x ~ y> z2 ) = (~y x + y 2 > ^ 2 > x3 ~ %2 y^ %Zz2 )- 

We choose G = —xy + y 2 . We obtain the quotient 

J = (G) A I A+ 2I>+ + 2Po = ( x2 , X y,y 2 ) = l A +Rl+ R 2 - 

We remark that R\ + R 2 — T>q + Vq . Now we form 

i a+ j r 1 + j r 2 +p 1 +p 2 = !~ ©a J = {-x 2 + xy + 2y 2 , x 2 z - 2xyz, x 3 + x 2 y - 6x 2 z, x 3 z - Ax 2 z 2 ). 
We choose G' = x 2 — xy — 2y 2 . Then we obtain the quotient 

(G")0aI a +r 1 +p 2 +p 1 +p 2 = (xz-2yz, -xy-y 2 ~Qyz,x 2 -y 2 +Qyz,y 2 z+2yz 2 ) =I h A+Sl +s 2 = l red- 

We obtained l re d from I + , I - by rational operations. We remark that Si+S 2 = (—4, —2, 1) + 
P 2 - 



in 



11 Hyperelliptic curves 



In this section we present an algorithm for hyperelliptic curves C of genus g in the standard 
form 

y 2 = a(x - xi)(x — x 2 ) • • • (x — x 2g+ i) —: h(x) 

with different x iy o ^ 0. The projectivisation has a single singular (nonsimple) infinite 
point Pqo = (0, 1, 0). We choose Pq := P^. Hyperelliptic curves have an involution x — > x, 
y — > —y. Let / and D be the image of the ideal I and the divisor D with respect to this 

involu tion. Then we have H V (x n ,y n ) = (xi, -yi) H h (x n , -y n ), 

(x, y) + (x, y) ~ 2P and % = J D . 

Because C has only one infinite point it is sufficient to consider affine ideals. However, 
the selection of the interpolating curves requires a modification. 

Let D = D + — D~ ~ D + + D~ — 2 deg(P~)P be a divisor of finite points. We have 
J := I D + + jp = Id+Id- ■ We replace the degree order by the weighted degreelexicographic 
order deg 29+lj2 with deg 23+12 (a; a t/ f> ) := (2g + l)a + 2b and y > x. Now we determine the 
minimal element / = p(x) + q(x)y of J with respect to this order. Then C and the 
curve f(x,y) = have deg 2g+12 (/) finite intersections with p 2 (x) — h(x)q 2 (x) = and 
V = p(x)/q(x). Let (a^y*), % = l,---,t := deg 2g+h2 {f) - deg(P+) - deg(P>~) be the 
remaining finite intersections. It follows 

(/) = D + + D= + (x 1: Vl ) + ■ ■ ■ + (x t , y t ) - deg 29+li2 (/)P , 

i.e. 

D - (deg(P+) - deg(Zr))P ~ (x u - Vl ) + ■■■ + (x t , -y t ) - tP =: D 1 - tP . 



LEMMA 9 Pi — tP is the reduced divisor for D — deg(P)P . 

Proof: The proof follows from the fact that t := deg 2g+12 (/) — deg(P + ) — deg(P^) is 
minimal if deg 2g+12 (/) is minimal. • 

The divisor D x corresponds to the ideal 

Ired = ID! = (f,Ic) '■ (Id+Id-)- 

Remark: Contrarily to Cantors algorithm we can describe our algorithm by this single 
formula. Our algorithm uses a reduction function of the general form / = p(x) + yq(x). 
In contrast Cantors algorithm uses reduction functions of the special form y—p(x) several 
times (cf. the example below). 

12 Picard curves 

In this section we present an algorithm for Picard curves C 

y 3 = a(x — Xi)(x — x 2 )(x — x 3 )(x — rr 4 ) =: h(x) 

with four different Xi, a ^ 0. The projectivisation has a single 4- fold infinite point 
Poo = (0, 1, 0). We choose Po := Poo- C has only one infinite point and it is sufficient to 
consider affine ideals. Similarly to the case of hyperelliptic curves we replace the degree 

1 1 



order by the weighted degreelexicographic order with deg^ := (x a y b ) := 4a + 36 and 
y > x. 

Let D = D + — D~ be a divisor of finite points. We determine the minimal element 
/ = p(x) + q(x)y + r(x)y 2 of Id+ with respect to the above order. We have 

(f) = D+ + R 1 + ..- + R t - deg 4i3 (/)P 

with t := deg 43 (/) — deg(Z) + ) remaining finite points D' = Ri + ■ • ■ + R t whose x- 
coordinates are zeros of the polynomial 



p q r 
hr p q 
hq hr p 



p + q h + r h — 3pqrh 



of degree t. We have 

I D , = {f,I c ):I D+ . 

We determine the minimal element g of Id'+d- — Id 1 Id- with respect to the above order. 
We have 

(g) = D' + D- + S 1 + --- + S q - deg 4i3 (2)P 

with q := deg 43 (g) — deg(-D') — deg(D~) remaining finite points D" — S± + ■ ■ ■ + S q . It 
follows 

D" - qP ~ -D' -D- + (deg 4i3 (/) - q)P ~ D - (deg(D + ) - deg(ZT ))P . 
Lemma 10 D" — qP$ is the reduced divisor for D — deg(_D)P - 

Proof: The proof follows from the fact that q is minimal if deg 43 (g) is minimal. • 

We have 

hed = Id" = (g, Ic) '■ Id'+d-- 

An algorithm for the Jacobian group of this curve is discussed in [7J |H] . Contrarily to 
our algorithm these algorithms use the concrete structure of the curve and require the 
distinction of many different cases. Our algorithm for Picard curves has a straightforward 
generalization to superelliptic curves 

y m = a(x — X\) • • • (x — x n ) 

with different and lcd(m, n) = 1. 



13 The case of characteristic p 

In this last section we make some remarks about the case of characteristic p. Using the 
theory of ^H] one can show that our algorithm has an analogue if we replace C by a field 
k of characteristic p. k has the algebraic closure k. The divisor group Div(C) is the free 
Abelian group consisting of formal finite sums J2p & c(k) m pP with nip G Z . 

A divisor is defined over k if it is fixed by the natural Galois action of Gal(fc, k). 
The divisors defined over k form the subgroup Divk(C). Analogously one defines the 
group Div^iC). Principal divisors are defined as zeros and poles of rational functions 
%^ y,z l where G,H {H (F(x,y,z)) are homogeneous polynomials of equal degree with 



1? 



coefficients in k. They form a subgroup Div^(C) C Div®{C). We define Jac k (C) := 
Div®(C)/Divj?(C). Furthermore we can define the analog notion of an reduced divisor. 

Let D be an element of Divk(C) without infinite points. Then the polynomials 
p(x,y) G k[x, y] with (p) > D form an ideal Id C k[x,y]. One can show that there 
is a one-to-one correspondence between ideals I of k[x,y] with / D Ic and divisors -D of 
Divk{C) of finite points. 

Now let C be a hyperelliptic curve or a Picard curve. The affine part of the above 
hyperelliptic curves is smooth for p ^ 2 and the above Picard curves are smooth for p ^ 3. 
This case is interesting in view of applications in cryptography. Let I + , 1~ be two ideals of 
k[x, y] with divisors D + ,D~. We apply the corresponding algorithm of the two previous 
sections to I + ,I~. Because all operations are rational we obtain an ideal I re d of k[x, y\. 
We have an analogue of Lemma 9,10. Therefore I re d corresponds to a reduced divisor. 
Example: Let C be the hyperelliptic curve y 2 = (x— 3)(x— 2)(x— l)x(x+l)(x+2)(x+3) =: 
h(x) for k = Fit and let D 1 = (4, 5) + (5, 8) + (6, 4), D 2 = (7, 5) + (10, 3) + (11, 1). We 
have ioi = {x 3 + 2a; 2 + 6x + 16, 5a; 2 + 9x + 8 — y) =: (ai, &i — y) and 7 D2 = (a; 3 + 6a; 2 + 
2x + 12, 11a; 2 + 5x + 9 - y) =: (a 2 , 6 2 - y). 

1. Cantors algorithm: We have SiOi + s 2 a2 = 1 with certain Si, s 2 - We obtain the 
composed ideal l£> 1 l£ >2 with the basis (a, b — y) := (aia 2 , (sia^ + s 2 a 2 &! — y)modaia 2 ) = 
(a; 6 + 8a; 5 + 3a; 4 + 13a; 2 + 2x + 5,x 5 + 7x 4 + 2x 3 + 6x 2 + 5x + 5 — y). The reduction process 
gives the ideals of equivalent divisors 

(a', b' - y) := (^, (-b - y)moda') = {x A + 6a; 3 + 2a; 2 + 5a; + 5, 6a; 3 + x 2 + 5x - y) and 

(a", b" - y) := (^, {-b' - y)moda") = {x 3 + 9x 2 + 3x, 2x 2 + 13x - y). 
The last ideal corresponds to the reduced divisor. 

2. Our algorithm: We obtain for Id 1 Id 2 the Groebner basis (a; 6 + 8a; 5 + 3a; 4 + 13a; 2 + 2a; + 
5, 11a; 4 + 9a; 3 + 2x 2 + 9x + y(x + 1)) =: (., /) with respect to the weighted lexicographic 
order and (/, y 2 - h(x)) : (I d Jd 2 ) = (x 3 + 9a; 2 + 3x, 2x 2 + 13a; - y). 
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